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Octonions, simple Moufang loops and triality 



Gabor P. Nagy and Petr Vojtechovsky 



Abstract 

Nonassociative finite simple Moufang loops are exactly the loops constructed by Paige 
from Zorn vector matrix algebras. We prove this result anew, using geometric loop 
theory. In order to make the paper accessible to a broader audience, we carefully discuss 
the connections between composition algebras, simple Moufang loops, simple Moufang 3- 
nets, S-simple groups and groups with triality. Related results on multiplication groups, 
automorphisms groups and generators of Paige loops are provided. 
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1 Introduction 

The goal of this paper is to present the classification of finite simple Moufang 
loops in an accessible and uniform way to a broad audience of researchers in 
nonassociative algebra. The results are not new but the arguments often are. 
Although not all proofs are included, our intention was to leave out only 
those proofs that are standard (that is those that can be found in many 
sources), those that are purely group-theoretical, and those that require 
only basic knowledge of loop theory. We have rewritten many proofs using 
geometric loop theory — a more suitable setting for this kind of reasoning. To 
emphasize the links to other areas of loop theory and algebra, we comment 
on definitions and results generously, although most of the remarks we make 
are not essential later in the text. 

Here is a brief description of the content of this paper. After reviewing 
some basic properties of loops, nets and composition algebras, we construct 
a family of simple Moufang loops from the Zorn alternative algebras. These 
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loops are also known as Paige loops. We then briefly discuss the multiplica- 
tion groups of Paige loops, because these are essential in the classification. 

With every Moufang loop we associate a Moufang 3-net, and with this 
3-net we associate a group with triality. An S-homomorphism is a homo- 
morphism between two groups with triality that preserves the respective 
triality automorphisms. This leads us to the concept of 5-simple groups 
with triality, which we classify. The group with triality G associated with a 
simple Moufang loop L must be 5-simple. Moreover, when L is nonassocia- 
tive G must be simple. This is the moment when we use results of Liebeck 
concerning the classification of finite simple groups with triality. His work 
is based on the classification of finite simple groups. The fact that there 
are no other nonassociative finite simple Moufang loops besides finite Paige 
loops then follows easily. 

Building on the geometric understanding we have obtained so far, we 
determine the automorphism groups of all Paige loops constructed over 
perfect fields. We conclude the paper with several results concerning the 
generators of finite Paige loops and integral Cayley numbers. All these re- 
sults are mentioned because they point once again towards classical groups. 
Several problems and conjectures are pondered in the last section. 

A few words concerning the notation: As is the habit among many 
loop theorists, we write maps to the right of their arguments, and therefore 
compose maps from left to right. The only exception to this rule are some 
traditional maps, such as the determinant det. A subloop generated by S 
will be denoted by (S). The symmetric group on n points is denoted by S n . 

2 Loops and nets 

We now give a brief overview of definitions and results concerning loops 
and nets. Nets (also called webs in the literature) form the foundations of 
the geometric loop theory. All material covered in I2.1H2.3I can be found in 
[4] and [25], with proofs. We refer the reader to [25j Ch. II] and [8j Ch. 
VIII, X] for further study of nets. 

2.1 Quasigroups and loops 

Let Q = (Q, •) be a groupoid. Then Q is a quasigroup if the equation 
x ■ y = z has a unique solution in Q whenever two of the three elements 
x, y, z £ Q are specified. Quasigroups are interesting in their own right, 
but also appear in combinatorics under the name latin squares (more pre- 
cisely, multiplication tables of finite quasigroups are exactly latin squares), 
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and in universal algebra, where subvarieties of quasigroups are often used 
to provide an instance of some universal algebraic notion that cannot be 
demonstrated in groups or other rigid objects. We ought to point out that 
in order to define the variety of quasigroups equationally, one must intro- 
duce additional operations \ and / for left and right division, respectively. 

A quasigroup Q that possesses an element e satisfying e • x = x • e = x 
for every x G Q is called a loop with neutral element e. The vastness of the 
variety of loops dictates to focus on some subvariety, usually defined by an 
identity approximating the associative law. (Associative loops are exactly 
groups.) In this paper, we will be concerned with Moufang loops, which are 
loops satisfying any one of the three equivalent Moufang identities 

((xy)x)z = x(y(xz)), {{xy)z)y = x{y(zy)), (xy)(zx) = (x(yz))x, (1) 

and in particular with simple Moufang loops (see below). Every element 
x of a Moufang loop is accompanied by its two-sided inverse x" 1 satisfy- 
ing xx~ l = x~ l x = e. Any two elements of a Moufang loop generate a 
subgroup, and thus (xy)" 1 = y^x" 1 . 

Each element x of a loop Q gives rise to two permutations on Q, the 
left translation L x : y i— > xy and the right translation R x : y i— > yx. The 
group Mlt Q generated by all left and right translations is known as the 
multiplication group of Q. The subloop limQ of MltQ generated by all 
maps L x L y L~ x , R x R y R xy x and R X L~ X , for x, y G Q, is called the inner 
mapping group of Q. It consists of all ip G Mlt Q such that eip = e. 

A subloop S of Q is normal in Q if Sip = S for every <p € InnQ. The 
loop Q is said to be simple if the only normal subloops of Q are Q and {e}. 

In any loop Q, the commutator of x, y G Q is the unique element 
[x,y] € Q satisfying xy = (yx)[x,y], and the associator of x, y, z € Q 
is the unique element [x,y,z] G Q satisfying (xy)z = (x(yz))[x, y, z\. We 
prefer to call the subloop C(Q) of Q consisting of all elements x such that 
[x,y] = [y,x] = e for every y G Q the commutant of Q. (Some authors use 
the name centrum or Moufang center.) The subloop N(Q) consisting of all 
x G Q such that [x, y, z] = [y, x, z] = [y, z,x] = e holds for every y, z G Q 
is known as the nucleus of Q. Then Z(Q) = C{Q) n N{Q) is the center of 
Q, which is always a normal subloop of Q. 

2.2 Isotopisms versus isomorphisms 

Quasigroups and loops can be classified up to isomorphism or up to iso- 
topism. When Q±, Q2 are quasigroups, then the triple (a, (3, 7) of bijections 
from Q\ onto Q2 is an isotopism of Q\ onto Q2 if xa ■ yj3 = (x ■ y)j holds 
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for every x, y G Q\. An isotopism with Q\ = Q2 is called an autotopism. 
Every isomorphism a gives rise to an isotopism (a, a, a). The notion of 
isotopism is superfluous in group theory, as any two groups that are isotopic 
are already isomorphic. 

In terms of multiplication tables, Q\ and Q2 are isotopic if the multi- 
plication table of Q2 can be obtained from the multiplication table of Q\ 
by permuting the rows (by a), the columns (by /?), and by renaming the 
elements (by 7). Isotopisms are therefore appropriate morphisms for the 
study of quasigroups and loops. On the other hand, every quasigroup is 
isotopic to a loop, which shows that the algebraic properties of isotopic 
quasigroups can differ substantially. Fortunately, the classification of finite 
simple Moufang loops is the same no matter which kind of equivalence (iso- 
topism or isomorphism) we use. This is because (as we shall see) there is 
at most one nonassociative finite simple Moufang loop of a given order, up 
to isomorphism. 

A loop L is a G-loop if every loop isotopic to L is isomorphic to L. So, 
finite simple Moufang loops are G-loops. 

2.3 Loops and 3-nets 

Let k > 2 be an integer, V a set, and C\, . . . disjoint sets of subsets 
of V. Put C = \JCi. We call the elements of V and C points and lines, 
respectively, and use the common geometric terminology, such as "all lines 
through the point F", etc. For i 6 £j, we also speak of a line of type i or 
an i-line. Lines of the same type are called parallel. 

The pair (V, C) is a k-net if the following axioms hold: 

1) Distinct lines of the same type are disjoint. 

2) Two lines of different types have precisely one point in common. 

3) Through any point, there is precisely one line of each type. 

Upon interchanging the roles of points and lines, we obtain dual k-nets. 
In that case, the points can be partitioned into k classes so that: 

1') Distinct points of the same type are not connected by a line. 

2') Two points of different types are connected by a unique line. 

3') Every line consists of k points of pairwise different types. 
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There is a natural relation between loops and 3-nets. Let us first start 
from a loop L and put V = L x L. Define the line classes 

Ci = {{(x,c) | x G L} | c € L}, 
C 2 = {{(c,y) | y € L} | c € L}, 
£3 = {{{x, y) | x,y € L, xy = c} \ c £ L}. 

Then, (V, C = C\ U £2 U £3) is a 3-net. The lines of these classes are 
also called horizontal, vertical and transversal lines, respectively. The point 
O = (e, e) is the origin of the net. 

Let us now consider a 3-net (V,C = L\ U £2 U £3). Let O € V be 
an arbitrary point, and let £, fc be the unique horizontal and vertical lines 
through O, respectively. Then the construction of Figure 1 defines a loop 
operation on £ with neutral element O. 

k 



y 






0' 


x y x ■ y 



i 



Figure 1: The geometric definition of the coordinate loop. 

Since the parallel projections are bijections between lines of different 
type, we can index the points of k by points of £, thus obtaining a bijection 
between V and I x I. The three line classes are determined by the equations 
X = c, Y = c, XY = c, respectively, where c is a constant. We say that 
(£, O) is a coordinate loop of the 3-net (V, C). 

2.4 Collineations and autotopisms 

Let J\f = (V,C) be a 3-net. Collineations are line preserving bijective 
maps V — > V . The group of collineations of M is denoted by Coll TV. A 
collineation induces a permutation of the line classes. There is therefore a 
group homomorphism from Coll TV* to the symmetric group S3. The kernel 
of this homomorphism consists of the direction preserving collineations. 
Let L be the coordinate loop of TV = (V, C) with respect to some origin 

G V. Let (p : V — > V be a bijection. Then <p preserves the line classes 

1 and 2 if and only if it has the form (x, y) 1— ► (xa, yj3) for some bijections 
a, (3 : L — > L. Moreover, if ip preserves the line classes 1 and 2 then ip also 
preserves the third class if and only if there is a bijection 7 : L — > L such 
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that the triple (a, /3, 7) is an autotopism of L. Automorphisms of L can be 
characterized in a similar way (see Lemma l7,2p . 



2.5 Bol reflections 

Let M be a 3-net and 4 £ A, for some i. We define a certain permutation 
erg. on the point set V (cf. Figure 2). For P G V, let Oj and be the 
lines through P such that Oj € Cj, at € and {i, j, k} = {1, 2, 3}. 
Then there are unique intersection points Qj = aj n £j, Qfe = at D We 
define Pcr^ = &j n where 6j is the unique j-line through Q^, and 
the unique fc-line through Qj. The permutation is clearly an involution 
satisfying Cjcrg. = £/., Ck°~e. 1 = C,j. If it happens to be the case that is 
a collineation, we call it the Bol reflection with axis £{. 



Obviously, every Bol reflection fixes a line pointwise (namely its axis) 
and interchanges the other two line classes. In fact, it is easy to see that any 
collineation with this property is a Bol reflection. Then for any 7 G Coll M 
and £ £ £ we must have 7 _1 <7^7 = ae y , as 7~ 1 o"^7 is a collineation fixing 
the line £7 pointwise. In words, the set of Bol reflections of M is invariant 
under conjugations by elements of the collineation group of M . 

Let ii G Ci, i = 1,2,3, be the lines through some point P of M. As we 
have just seen, ae 1 a£ 2 ae 1 = a£ 3 , since lj,oi x = £2- Therefore (a^a^) 3 = id 
and (cr^j, cr£ 2 , ct£ 3 ) is isomorphic to S3. This fact will be of importance later. 

A 3-net M is called a Moufang 3-net if a£ is a Bol reflection for every 
line £. The terminology is justified by Bol, who proved that ftf is a Moufang 
3-net if and only if all coordinate loops of N are Moufang [JJ p. 120]. 



P 




Figure 2: The Bol reflection with axis £{. 
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Figure 3: The 2-Bol configuration. 



The configuration in Figure 3 is called the 2-Bol configuration. Using 
the other two directions of axes, we obtain 1- and 3-Bol configurations. 
With these configurations at hand, we see that the net M is Moufang if and 
only if all its Bol configurations close (i.e., Rag and Pan are collinear). See 
[23 Sec. II. 3] for more on closures of net configurations. 

3 Composition algebras 

The most famous nonassociative Moufang loop is the multiplicative loop of 
real octonions. Recall that octonions are built up from quaternions in a 
way analogous to the construction of quaternions from complex numbers, 
or complex numbers from real numbers. Following Springer and Veldkamp 
[22], we will imitate this procedure over any field. We then construct a 
countable family of finite simple Moufang loops, one for every finite field 



Let F be a field and V a vector space over F. A map N : V — > F is a 
quadratic form if ( , ) : V x V — > F defined by (u, v) = {u+v)N — uN — vN 
is a bilinear form, and if (Xu)N = X 2 (uN) holds for every u G V and A G F. 

When / :7xy->Fisa bilinear form, then u, v G V are orthogo- 
nal (with respect to /) if (u, v)f = 0. We write u _L v. The orthogonal 
complement W 1 - of a subspace W < V is the subspace {v G V; v _L w for 
every w 6 W}. The bilinear form / is said to be non- degenerate if V 1 - = 0. 
A quadratic form N is non- degenerate if the bilinear form ( , } associated 
with N is non-degenerate. When N is non-degenerate, the vector space V 
is said to be nonsingular. A subspace W of (V, N) is totally isotropic if 
uN = for every u G W. All maximal totally isotropic subspaces of (V, N) 
have the same dimension, called the Witt index. UN is non-degenerate and 
dimF < oo then the Witt index cannot exceed dimV/2. 

In this paper, an algebra over F is a vector space over F with bilinear 
multiplication. Specifically, we do not assume that multiplication in an 
algebra is associative. 



GF{q). 
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A composition algebra C = (C, N) over F is an algebra with a mul- 
tiplicative neutral element e such that the quadratic form A" : C — > F is 
non-degenerate and 

(uv)N = uNvN (2) 

holds for every u, v G C . In this context, the quadratic form N is called a 
norm. 

When ( , ) is the bilinear form associated with the norm N, the con- 
jugate of x G C is the element x = (x,e)e — x. Every element x G C 
satisfies 

x 2 — (x, e)x + (xN)e = 

(cf. [221 Prop. 1.2.3]), and thus also xx = xx = (xN)e. In particular, 
the multiplicative inverse of x is x _1 = (xN) x, as long as xN ^ 0. 
Furthermore, ^ x G C is a zero divisor if and only if xA = 0. 

3.1 The Cayley-Dickson process 

Let C = (C,N) be a composition algebra over F and A G F* = F \ {0}. 
Define a new product on D = C x C by 

(x, y)(u, v) = (xu + Xvy, vx + yu), 

where x, y, u, v are elements of C . Also define the norm M on D by 

(x, y)M = xN - X(yN), 

where x, y G C. By (22l Prop. 1.5.3], if C is associative then D = (D,M) 
is a composition algebra. Moreover, D is associative if and only if C is 
commutative and associative. The above procedure is known as the Cayley- 
Dickson process. 

We would now like to construct all composition algebras by iterating the 
Cayley-Dickson process starting with F. However, there is a twist when F 
is of characteristic 2. Namely, when char F = 2 then F is not a composition 
algebra since (x,x) = (x + x)N — xN — xN = for every x G F, thus 
(x,y) = (x, Xx) = X{x,x) = for every x, y G F, and is therefore 
degenerate. The situation looks as follows: 

Theorem 3.1 (Thm. 1.6.2. [22])- Every composition algebra over F is 
obtained by iterating the Cayley-Dickson process, starting from F if char F 
is not equal to 2, and from a 2-dimensional composition algebra when chari 7 
is equal to 2. The possible dimensions of a composition algebra are I, 2, 
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4 and 8. Composition algebras of dimension 1 or 2 are commutative and 
associative, those of dimension 4 are associative but not commutative, and 
those of dimension 8 are neither commutative nor associative. 

A composition algebra of dimension 2 over F is either a quadratic field 
extension of F or is isomorphic to F © F . 

For a generalization of composition algebras into dimension 16 we refer 
the reader to |26j . 

3.2 Split octonion algebras 

Composition algebras of dimension 8 are known as octonion algebras. Since 
there is a parameter A in the Cayley-Dickson process, it is conceivable (and 
sometimes true) that there exist two octonion algebras over F that are not 
isomorphic. 

A composition algebra (C, N) is called split if there is ^ x £ C such 
that xN = 0. By [221 Thm. 1.8.1], over any field F there is exactly one split 
composition algebra in dimension 2, 4 and 8, up to isomorphism. As we 
have already noticed, split composition algebras are precisely composition 
algebras with zero divisors. The unique split octonion algebra over F will 
be denoted by O(F). (It is worth mentioning that when F is finite then 
every octonion algebra over F is isomorphic to 0(F), cf. [22j p. 22].) 

All split octonion algebras O(F) were known already to Zorn, who con- 
structed them using the vector matrices 



where a, b G F and a, (3 are vectors in F 3 . The norm N is given as the 
"determinant" detx = ab — a ■ j3, where a ■ (3 is the usual dot product 




(3) 



(01,02,03) 



(/3i,/3 2 ,/3 3 ) 



aiPi + a 2 /?2 + a 3 {3 3 . 



The conjugate of x is 




(4) 



and two vector matrices are multiplied according to 




ac + a ■ 5 

cj3 + b5 + a x 7 




Octonions and simple Moufang loops 



11 



where x 5 is the usual vector product 

(Pl,02,P3) X {Sl,6 2 ,6 3 ) = (0 2 S 3 - 3 S 2 , 03h ~ 0lS 3 , 0lS 2 - 2 5 X ). 

The reader can think of this Zorn vector algebra anytime we speak of 
O(F). 

It turns out that every composition algebra satisfies the alternative laws 

(xy)x = x(yx), x(xy) = x 2 y, [xy)y = xy 2 . 

This is an easy corollary of the (not so easy) fact that composition algebras 
satisfy the Moufang identities (HI), cf. [22] Prop. 1.4.1]. 

4 A class of classical simple Moufang loops 
4.1 Paige loops 

Although the octonion algebra O(F) satisfies the Moufang identities, it 
is not a Moufang loop yet, since it is not even a quasigroup (0 • x = 
for every x € O(F)). Denote by M(F) the subset of O(F) consisting of 
all elements of norm (determinant) 1. We have detxdety = detxy since 
Q(F) is a composition algebra, which means that M(F) is closed under 
multiplication. The neutral element of M(F) is 

/ 1 (0,0,0) \ 
V (0,0,0) 1 )> 

and the two-sided inverse of x £ M(F) is = x, where x is as in J3]) and 
x is as in J4| . 

Let Z be the center of the Moufang loop M(F). We have Z = {e} when 
charF = 2, and Z = {e, — e} when charF ^ 2. Denote by M*(F) the 
Moufang loop M(F)/Z. 

Theorem 4.1 (Paige [21). Let F be a field and M*(F) the loop of Zorn 
vector matrices of norm one modulo the center, multiplied according to d2j). 
Then M*(F) is a nonassociative simple Moufang loop. When F = GF(q) 
is finite, the order of M*(F) is 2l 3 (Q A ~ 1); where d = (2,q — 1). 

The noncommutative loops M*(F) of Theorem 14.11 are sometimes called 
Paige loops. 

In the remaining part of this section, we investigate the multiplication 
groups of loops M(F) and M*(F) constructed over an arbitrary field F. 
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4.2 Orthogonal groups 

Let V be a vector space over F with a non-degenerate quadratic form N : 
V — > F. A linear transformation / : V — ► V is orthogonal with respect to N 
if it preserves N, i.e., if (xf)N = xN for all x G V. Then / preserves the 
associated bilinear form ( , ) as well: 

<x/,i//> = (xf + yf)N-(xf)N-(yf)N 
= (x + y)N -(x)N -(y)N 
= (x,y). 

The group consisting of all orthogonal transformations of (V, N) is known as 
the orthogonal group 0(V) = 0(V,N). The determinant of an orthogonal 
transformation is ±1. Orthogonal transformations with determinant 1 form 
the special orthogonal group SO(V). The elements of SOiV) are called 
rotations. One usually denotes by fi(V) the commutator subgroup O'iV) 
of 0(V). By definition, every element of £l(V) is a rotation, and we would 
like to see which rotations belong to Q(V). 

Take an element g G SO(V) and consider the map 1 — g : x h- > x — xg. 
Define the bilinear form \g on V(l — 5) by (u,v)x g = (u,w), where w is an 
arbitrary vector from V satisfying w(l—g) = v. Then \g 1S well-defined and 
non-degenerate, by [23 Thm. 11.32]. Recall that the discriminant discr(/) 
of a bilinear form / with respect to some basis is the determinant of its 
matrix. Whether or not the discriminant of Xg 1S a square in F does not 
depend on the choice of the basis in V(l — g). This property characterizes 
elements of Q(V). 

Lemma 4.2 (11.50 Thm. [27J). The rotation g G SO{V) belongs to n(V) 
if and only «/discr(x 9 ) G F 2 . 

Pick any element a G 0(V) with a 2 = id. The two subspaces 

U = V(a - 1) = {xa -x \ x G V}, 
W = V(a + 1) = {xa + x \ x G V} 

are orthogonal to each other. Indeed, 

(xa - x,ya + y) = (xa, y) - (x, ya) = (xa, y) - (xa, ya 2 ) = 0. 

The subspace W consists of vectors invariant under a. If W is a non- 
singular hyperplane (that is, a subspace of dimension dimV — 1) then a 
is called a symmetry with respect to W . (If char(i ? ) = 2 then a is usually 
called a transvection ) If a is a symmetry with respect to W and g G 0(V), 
the conjugate a 9 = g~ l ag is a symmetry with respect to Wg. 
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4.3 Multiplication groups of Paige loops 

Let now V = O(F) be the split octonion algebra over F. We identify the 
vector matrix 

f Xq (X 1 ,X 2 ,X 3 ) 

\ (x 4 ,X 5 ,X 6 ) X 7 

with the column vector (xo, . . . ,2:7)*, and we use the canonical basis of F 8 
as the basis of V. Since (x, y) = det (a: + y) — det x — det y = x 7 yo — x^y\ — 
X5V2 ~ x s y 3 - xiy 4 - x 2 y 5 - x 3 y 6 + x y 7 , the bilinear from (x,y) can be 
expressed as x t Jy, where 

/ 

-1 





0-10 

0-10 

-1 

\ 1 

Recall that M(F) consists of all elements of O(F) that are of norm 1. 

Lemma 4.3. For every a G M(F), we have L a , R a € VL(V). 

Proof. We only deal with the case L a . Since aN = 1, we have L a £ 0(V), 
by J2j). Let a = (ao, • • • , 07)* and write matrix maps to the left of their 
arguments. Then L a can be identified with 



/ ao 











a 1 


«2 












a 











a 6 


-a 5 


01 










«o 





-a 6 





a.i 


a 2 













ao 


a 5 


— 04 





a 3 




04 





-a 3 


a-2 


a 7 













a 5 


«3 





-ai 





fl-7 










a 6 


— 02 


«i 











a 7 







V 


a, 1 


a 5 


«6 











a 7 


) 



Routine calculation yields det(L a ) = (aN) 4 , and L a G 50(F) follows. 
By Lemma I4T21 it suffices to show discr(xL a ) € -F 2 . 

Assume first that (e - a)N ^ 0. Then V(l - L Q ) = V(e — a) = V, and 
((e — a) _1 u)(l — L a ) = v for every v € V. Thus (n, v)\La = («, vL~_ a ), and 









1 \ 











-1 











-1 






































J 
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the matrix of \L a is JL e } a , where J is as in ([6]). Therefore discr(xL a ) = 
det(J) det(L e _ a ) _1 = ((e — a)N)~ 4 £ F 2 . 

Suppose now (e — a)N = and exclude the trivial case e — a € F. Define 
the elements 



eo 



e-2 



1 (0,0,0) 

(0,0,0) 

(0,1,0) 

(0,0,0) 



ei 



e 3 



(1,0,0) 

(0,0,0) 

(0,0,1) 

(0,0,0) 



and 



fo = (e - a)e 
fi = (e - a)ei 
f 2 = (e - a)e 2 
h = {e- a)e 3 



1 - a 



(-a 4 , -a 5 , -a 6 ) 



(0,0,0) 








(1-00,0,0) 

— 04 

(0,1-ao.O) 
-a 5 

(0,0,1-ao) 
-a 6 



(0, -a 3 ,o 2 ) 


(a 3 ,0, -ai) 


(-a 2 ,ai,0) 

The vectors span a totally isotropic subspace of V and fi G (e — a)F. 
Since ((e — a)j;, (e — a)?/) = (e — a)N(x, y) = 0, (e — a)F is totally isotropic 
as well. In particular, dim((e — a)V) < 4. 

Assume a® ^ 1. Then, the vectors /j are linearly independent and hence 
form a basis of (e — a)V . The matrix M = (rriij) of \L a with respect to the 
basis {/ , fi, / 2 , / 3 } satisfies my = (fi, fj)xL a = {fi,ej}, which yields 



M 



by calculation. Then discr(xL a ) = detM = (0104 + a 2 as + a 3 «6) 2 £ 

The special case ao = 1 can be calculated similarly. □ 

For the rest of this section, let l denote the conjugation map x 1— > x. 
Note that l € 0(V) and ei = e. 

Lemma 4.4. Any element g £ O(y) rn^/i eg = e commutes with 1. 

Proof. We have x<? = ((x,e)e — x)g = (x,e)eg — xg = (xg,eg)eg — xg = 
(xg,e)e-xg = xg. □ 



/ 





a l 


a 5 


a 6 


\ 




—04 





a 3 


-a 2 








-a 3 





«i 




V 


-«6 


a 2 


-ai 





/ 
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Lemma 4.5. For an arbitrary element g G 0(V), we define i 9 = g x ig. 
Put a = eg. Then aN = 1 and xi 9 = axa holds for all x G V . 

Proof. On the one hand, aN = (eg)N = eN = 1, therefore aa = e and 
a -1 = a. On the other hand, g = hL a for some h with eh = e. By the 
previous lemma, i 9 = L~ 1 iL a and xi 9 = ((xL~ 1 )i)L a = a{a~ l x) = axa. □ 

The map —v:x\-^> —x is a symmetry with respect to the 7-dimensional 
nonsingular hyperplane 



H 



x (x 1 ,x 2 ,x 3 ) 

IX4,X 5 ,X 6 ) -X 



Xi G F 



The conjugate — l 9 is a symmetry with respect to Hg. This means that 

C = {-i 9 | g G 0(V)} = {-L-hL a | a G M(F)} 

is a complete conjugacy class consisting of symmetries. 

Theorem 4.6. The multiplication group of M(F) is Q(Q(F),N). 

Proof. By Lemma EQJ Mlt(M(F)) < Q(V). We have (ax)t = xua, which 
implies 

u 9 = iL a l iL a = R a L a 

and 



9, h = 



(ii 9 )- 1 {u h ) = (RaLj-^RtLb) G Mlt(M(F)) 



for g,h G O(V). Let us denote by P the set consisting of g,h £ 0(V). 
V is clearly an invariant subset of 0(V). By [1, Thm. 5.27], V generates 
n(V), which proves Mlt(M(F)) = Q(0(F),N). □ 

Finally, we determine the multiplication groups of Paige loops. 

Corollary 4.7. The multiplication group of the Paige loop M*(F) is the 
simple group PO(0(F),iV) = PS1$(F). 

Proof. The surjective homomorphism ip : M(F) — > M*(F), x i— > ±x in- 
duces a surjective homomorphism $ : Mlt(M(F)) -> Mlt(M*(F)). On 
the one hand, the kernel of $ contains ±id. On the other hand PQ(V) = 
n{V)/{±id} is a simple group, cf. [1, Thm. 5.27]. Since Mlt(M*(F)) is 
not trivial, we must have Mlt (M*(i ? )) = PQ(V). Finally, the norm iV has 
maximal Witt index 4, therefore the notation PQg(F) is justified. □ 

Remark 4.8. The result of Theorem I4.6l is folklore, that is, most of the au- 
thors (Freudenthal, Doro, Liebeck, etc.) use it as a well-known fact without 
making a reference. The authors of the present paper are not aware of any 
reference, however, especially one that would handle all fields at once. 
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5 Groups with triality 
5.1 Triality 

Let G be a group. We use the usual notation x' y = y~ l xy and [x, y] = 
x~ x y~ x xy = x~ l x y for x, y G G. Let a be an automorphism of G, then xa 
will be denoted by x a as well, and [x,a] will stand for x~ 1 x a . The element 
a y e AutG maps x to x y ~ lay = ((x^" 1 )")^. 

Let S n be the symmetric group on {1, . . . , n}. G x H and G x H will 
stand for the direct and semidirect product of G and H , respectively. In 
the latter case, H acts on G. 

We have the following definition due to Doro [10J. 

Definition 5.1. The pair (G,S) is called a group with triality, if G is a 
group, S < Aut G, S = (a, p\ a 2 = p 3 = (ap) 2 = I) ^ S 3 , and for all g G G 
the triality identity 

[g,o][g,a]»[g,of = 1 

holds. 

The principle of triality was introduced by Cartan [6J in 1938 as a prop- 
erty of orthogonal groups in dimension 8, and his examples motivated Tits 
[28] , Doro was the first one to define the concept of an abstract group with 
triality, away from any context of a given geometric or algebraic object. 

Definition 5.2. Let (Gj, (cxj, pi)), i = 1,2 be groups with triality. The 
homomorphism ip : G\ — > G2 is an S-homomorphism if g<J\y> = g<p(T2 and 
gpi<p = gtppi hold for all g G G\. The kernel of an S-homomorphism is 
an S-invariant normal subgroup. The group with triality G is said to be 
S -simple if it has no proper S-invariant normal subgroups. 

The following examples of groups with triality are of fundamental im- 
portance. They are adopted from Doro [TO] . 

Example 5.3. Let A be a group, G = A 3 , and let cr, p G Aut G be defined 
by a : (01,02,03) 1— > (02,01,03) and p : (01,02,03) 1— > (02,03,01). Then G 
is a group with triality with respect to S = (a, p) . 

Example 5.4. Let A be a group with ip G Autyl, <p 7^ id^, satisfying 
xx 1 ^ x^ =1 for all x G A. Put G = A x A, a : (oi,o 2 ) i-> (02,01) and 
p : (01,02) 1— ► (0^,02 )■ Then G is a group with triality with respect to 
S = (a,p). 
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If A is of exponent 3 and ip = i&a then G is a group with triality in 
a wider sense, meaning that the triality identity is satisfied but S is not 
isomorphic to S3. 

Example 5.5. Let V be a two-dimensional vector space over a field of 
characteristic different from 3. Let S be the linear group generated by the 
matrices 



Then the additive group of V and S form a group with triality. 

Remark 5.6. If A is a simple group then the constructions in Examples 15.31 
and 15.41 yield 5-simple groups with triality. Obviously, if (G,S) is a group 
with triality and G is simple (as a group) then (G, S) is 5-simple. Below, 
we are concerned with the converse of this statement. 

5.2 Triality of Moufang nets 

In the following, (G, S) stands for a group G with automorphism group S 
isomorphic to 53. Let o, p € S be such that o 2 = p 3 = id. Let the three 
involutions of S be o\ = o, 02 = op and 03 = po = op 2 . Finally, the 
conjugacy class of will be denoted by Cj, 

The following lemma gives a more conceptual reformulation of Doro's 
triality. (It is similar to Lemma 3.2 of [17J, attributed by Liebeck to Richard 
Parker.) 

Lemma 5.7. The pair (G, S) is a group with triality if and only if (rjTj) 3 = 
id for every r» € Cj, Tj € Cj, where i, j € {1, 2, 3} and i 7^ j. In this case, 
{ T i-> T j)) i s a group with triality as well. 

Proof. The condition of the first statement claims something about the 
conjugacy classes Cj, which do not change if we replace S by (73,73). This 
means that the first statement implies the second one. 

For the first statement, it suffices to investigate the case i = 1, j = 3, 
T\ = o 9 and 73 = up 2 , with arbitrary g € G. Then the following equations 
are equivalent for every g € G: 




and 




1 



(aW)) 3 , 



1 



1 



1 



1 



o 9 {op 2 ) -a 9 {op 2 ) -o 9 {op 2 ) 

[g,v}p 2 ■ [g,°]p 2 ■ [a,o]p 2 , 

[9,o] ■ p^[g,o]p- p[g,o]p 2 , 
[g,o] [9,0]" [g,af. 
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This finishes the proof. □ 

The next lemma already foreshadows the relation between Moufang 3- 
nets and groups with triality. 

Lemma 5.8. Let P be a point of the Moufang 3-net M. Denote by £±,£2 
and £3 the three lines through P with corresponding Bol reflections o\, 02, 
03. Then the collineation group S = (o"i, 02, 03} = S3 acts faithfully on the 
set {^1,^2)^3}- This action is equivalent to the induced action of S on the 
parallel classes of M. 

Proof. As we have demonstrated in Section El the conjugate of a Bol reflec- 
tion is a Bol reflection. Thus o\Oia\ = 03 = 020102, which proves the first 
statement. The rest is trivial. □ 

Using these lemmas, we can prove two key propositions. 

Proposition 5.9. Let M be a Moufang 3-net and let M be the group of 
collineations generated by all Bol reflections of N . Let Mq < M be the 
direction preserving subgroup of M. Let us fix an arbitrary point P of AT 
and denote by S the group generated by the Bol reflections with axes through 
P. Then Mq <M , M = MqS, and the pair {Mq, S) is a group with triality. 

Proof. Mq < M = MqS is obvious. Thus S is a group of automorphism of 
Mq by conjugation. By Lemma [5?7l it is sufficient to show (af,aj) = S3 
for all g, h € Mq, where Oi and aj are the reflections on two different lines 
through P. Since g, h preserve directions, the axes of erf and intersect 
in some point P'. Hence (of, 0*2) — 5*3, by Lemma HT8l □ 

The converse of the proposition is true as well. 

Proposition 5.10. Let (G,S) be a group with triality. The following con- 
struction determines a Moufang 3-net Af(G, S). Let the three line classes 
be the conjugacy classes C\, C2 and C3. By definition, three mutually non- 
parallel lines Ti £ Ci (i = 1,2,3) intersect in a common point if and only 
if 

(n,T2,T 3 ) = S3. 

Moreover, if G\ = [G,S\S = (C\,C2,C3), then the group M(J\f) generated 
by the Bol reflections of M is isomorphic to G\jZ{G\). 
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Proof. By definition, parallel lines do not intersect. When formulating the 
triality identity as in Lemma [5.71 we see that two non-parallel lines have a 
point in common such that there is precisely one line from the third parallel 
class incident with this point. This shows that N{G,S) is a 3-net indeed. 

The Moufang property follows from the construction immediately, since 
one can naturally associate an involutorial collineation to any line T{ £ Cj, 
namely the one induced by Tj on G. This induced map fj interchanges the 
two other parallel classes Cj, and fixes the points on its axis, that is, it 
normalizes the S3 subgroups containing Tj. 

Finally, since a Bol reflection acts on the line set in the same way that 
the associated Cj-element acts on the set L)Cj by conjugation, we have the 
isomorphism M(M) S G 1 /Z{G X ). □ 

Remark 5.11. From the point of view of dual 3-nets, the point set is the 
union of the three classes Cj, and lines consist of the intersections of an S3 
subgroup with each of the three classes. 

Remark 5.12. One finds another construction of groups with triality using 
the geometry of the associated 3-net in P. O. Mikheev's paper [18]. A 
different approach to groups with triality is given in J. D. Phillips' paper 

m 

5.3 Triality collineations in coordinates 

At this point, we find it useful to write down the above maps in the coordi- 
nate system of the 3-net. If we denote by 0^ , o-m\o~m the Bol reflections 
with axes X = m,Y = to, XY = m, respectively, then we have 

(x, y) i — > (m(x~ 1 m),m~ 1 (xy)), 
(x,y) i — > ((xy)m^ 1 , (my^ 1 )?™), 
(x,y) i — > (my^ 1 , x^ 1 m) . 

This yields 

(x,y) 1 y (m~ 1 (xm~ 1 ),my), 
(x,y) 1 — ^ (xm, (m~ 1 y)m~ 1 ), 
(x, y) 1— > (mx, ym). 

These are direction preserving collineations generating G. 



a 



m 

(h) 
in 

(*) 



°m °1 

°m °1 

(*) W 

a Li en 

m 1 J- 
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They can be written in the form (TmO'i = {L^R^ ,L m ), er^ cr^ = 
(R m , L" 1 /?" 1 ) and o$ <?i = (Lm, R m ) as well. The associated autotopisms 
are 

(L m R m ■,L mi L m ), (R m ,L m R m i R m ); {Lmi Rmi L m Rm) i 

respectively. By the way, the fact that these triples are autotopisms is 
equivalent with the Moufang identities (pp. 



6 The classification of nonassociative finite simple 
Moufang loops 

6.1 Simple 3- nets 

The classification of finite simple Moufang loops is based on the classification 
of finite simple groups with triality. Using the results of the previous section, 
the classification can be done in the following steps. 

Proposition 6.1. Let if : Mi — * Mi be a map between two 3-nets that 
preserves incidence and directions. 

(i) Suppose that <p{Pi) = Pi holds for the points P\ E Mi, Pi £ Mi, Then 
(p defines a homomorphism (p : L\ — > Li in a natural way, where Li 
is the coordinate loop of the 3-net Mi with origin Pi. Conversely, the 
loop homomorphism (p : L\ — > Li uniquely determines a collineation 
M\ — > Mi, namely (p. 

(ii) Suppose that the 3-nets Mi (i = 1,2) are Moufang and if is a col- 
lineation onto. Let us denote by (Mi,S) the group with triality that 
corresponds to the 3-net Mi. Then the maps o~e h- > induce a surjec- 
tive S -homomorphism (p : Mi — » Mi, where at is the Bol reflection in 
Mi with axis I. Conversely, an S -homomorphism Mi — > Mi defines 
a direction preserving collineation between the 3-nets M(Mi,S) and 
M(M 2 ,S). 

Proof. The first part of statement (i) follows from the geometric definition 
of the loop operation in a coordinate loop; the second part is trivial. For 
the (ii) statement, it is sufficient to see that a relation of the reflections on 
corresponds to a point-line configuration of the 3-net, and that the 93-image 
of the configuration induces the same relation on the reflections 0"^) ■ The 
converse follows from Proposition 15.101 □ 
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In the sense of the proposition above, we can speak of simple 3-nets, 
that is, of 3-nets having only trivial homomorphisms. The next proposition 
follows immediately. 

Proposition 6.2. If L is a simple Moufang loop, then the associated ?>-net 
M is simple as well. That is, the group (Mo, S) with triality determined by 
J\f is S-simple. 

6.2 S'-simple groups with triality 

The structure of 5-simple groups with triality is rather transparent. It is 
clear that G is 5-simple if and only if it has no ^-invariant proper nontrivial 
normal subgroups. 

Let G be such a group and let N < G be an arbitrary proper normal 
subgroup of G. Let us denote by N{ the images of N under the elements of 
S, i = 1, . . . , 6. 

Since the union and the intersection of the groups Ni is an 5-invariant 
normal subgroup of G, we have G = Nx ■ ■ ■ Nq and {1} = Nx PI . . . fl Nq. 
If Ni n Nj is a proper subgroup of Ni for some i, j = 1, . . . , 6, then 
we replace Ni by Ni n Nj. We can therefore assume that the groups Ni 
intersect pairwise trivially. Since S acts transitively on the groups Ni, one 
of the following cases must occur: 

Case A. G is a simple group. In this case, there is no proper normal 
subgroup N . 

Case B. The number of distinct groups Ni is 2. Then N = N p , M = N a , 
G = NM, N n M = {1} and elements of N and M commute. Every 
element g E G can be written as g = ab a . p induces an automorphism ip on 
N. Then, g a = a a b = ba u and gP = aPb a P = aPbP~ 1(J = a,n^' X ° ', 
Moreover, applying the triality identity on a € N, we obtain 

(a (fi2 a v a)- 1 (aa^a^) a = 1, 

2 

which is equivalent with the identity aa^a^ = 1. This means that the map 
N x N — > G, (a,b) i— > ab a defines an 5-isomorphism between G and the 
construction in Example 15.41 

However, a result of Khukhro claims that the existence of the automor- 
phism if of N implies that N is nilpotent of class at most 3 (see [16j p. 
223], [20, Thm. 3.3]). Therefore, no S'-simple group with triality can be 
constructed in this case. 

Case C. The number of distinct groups Ni is 3: N = Nx, N p = N2, 
NP 2 = N 3 . We can assume iVf = Nx and N% = N 3 , 
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Case C/l. Assume that M = N\ n (A 2 A 3 ) is a proper subgroup of Ai. 
Then G Af = A 2 C A 2 A 3 , similarly M p2 G A 2 iV 3 . Moreover, AT = 
Af n {N£N%) = M. Hence, MM p M p2 is a proper S-invariant normal 
subgroup of G, a contradiction. 

Case C/2. Assume A x n (A 2 A 3 ) = {1}. Then G = N x x A 2 x A 3 A 3 . 
By the triality identity, we have a _1 a CT G Ni fl (A 2 A 3 ) for any a G Ai, thus, 
a' 7 = a. Consider the map $ : A 3 -» G, $(a, 6, c) = afc^ . By 

(ab p c p2 y = ac p b p2 and (a6 p c" 2 ) p = ca p b p2 , 

$ defines an 5-isomorphism between G and the group with triality in Ex- 
ample 15.31 

Case C/3. Assume Ai C A 2 A 3 , G noncommutative. We have G = 
Ai x A 2 = A 2 . Since G is S-simple, we must have Z(G) = {1} and 
Z(N) = {1}. Let us assume that a p = aia 2 with 1 ^ a\ G Ai, a 2 G A^ 2 for 
some element a G iVj = A. Take b £ N with ai6 7^ 6ai. Every element of 
Ai commutes with every element of A 2 . This implies 

1 ^ [0102,6] = [a p ,b] G NC\N p , 

a contradiction. 

Case C/4. If G is commutative and 5-simple, then we are in the situation 
of Example 15.51 The proof is left to the reader. 

We summarize these results in the following proposition. In the finite 
case the result was proved by S. Doro [10]. In the infinite case, it is due to 
G. P. Nagy and M. Valsecchi [20]. 

Proposition 6.3. Let G be a noncommutative S -simple group with triality. 
Then either G is simple or G = A x A x A, where A is a simple group and 
the triality automorphisms satisfy (a,b,c) p = (c,a,b), (a,b,c) a = (a, c, b). 



6.3 The classification 

Lemma 6.4. Let G = Ax Ax A be an S -simple group with triality. Then 
the associated loop is isomorphic to the group A. 

Proof. We leave to the reader to check that an associative simple Moufang 
loop A has G = AxAxA &s& group with triality. Since the group with 
triality determines the 3-net uniquely, and since groups are G-loops, that 
is, the coordinate loop does not depend on the choice of the origin, we are 
done. □ 
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Also the following result is due to Doro, but the way of proving is based 
on the geometric approach, hence new. 

Lemma 6.5 (Doro). Assume that G is a group with triality such that p is 
an inner automorphism. Then the associated Moufang loop has exponent 3. 

Proof. Let p be an inner automorphism of G. We assume G to be a group 
of direction preserving collineations of the 3-net M associated with L. We 
consider p as a collineation of M permuting the directions cyclicly. We 
denote by T + the collineation group of M generated by G and p. T + consists 
of collineations which induce an even permutation on the set of directions. 

Let a £ G be a direction preserving collineation which induces p on G 
and put r = oT x p. Obviously, r + = (G,r), hence r € Z(T + ). Moreover, 
since r + is invariant under a, we have r°" G Z(T + ). 

Let r be a Bol reflection whose axis is parallel to the axis of a. On the 
one hand, or S G and 

ot = r~ 1 arr = (a r a)(aT r ) 

holds. On the other hand, a T a = r _1 r CT € Z(T + ) and ar r € T + . Therefore, 

(ar) 3 = (a r a) 3 (ar r ) 3 = id 

by the modified triality property, cf . Lemma 15.71 

Assume now that the axis of the Bol reflections a and r are vertical with 
equation X = e and X = a. As we have seen in Section IS~3l the coordinate 
forms of these maps are (x, y)a = {x~ l ,xy) and (x, y)r = (ax _1 a, a~ l {xy)). 
This implies (x,y)ar = (axa, a _1 y) and (x,y)(crT) 3 = (a 3 xa 3 , a~ 3 y). By 
(err) 3 = id, we have a 3 = 1. Since we chose r arbitrarily, L must be of 
exponent 3. □ 

Corollary 6.6. If G is a finite group with triality which determines a non- 
commutative simple Moufang loop then all triality automorphisms are outer. 

Proof. Assume that a is an inner automorphism. Then so are a p and p = 
a p o . We have the same implication if we suppose ap or pa to be inner. In 
any case, p will be inner and L will be a finite Moufang loop of exponent 3. 
By [13, Thm. 4], L is either not simple or commutative. □ 

Theorem 6.7 (Liebeck's Theorem p2]). The only finite simple groups with 
triality are the simple groups (P£lg(q),S). The triality automorphisms are 
uniquely determined up to conjugation. (They are the so called graph auto- 
morphisms of P£lg(q).) 
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Corollary 6.8 (Thin. p2]). The only nonassociative finite simple Moufang 
loops are the Paige loops M*(q) = M*(GF(q)), where q is a prime power. 

7 Automorphism groups of Paige loops over per- 
fect fields 

Now that we have found all nonassociative finite simple Moufang loops, 
we will determine their automorphism groups. In fact, we will determine 
AutM*(F) whenever F is perfect. Recall that a field of characteristic p 
is perfect if the Probenius map x i— ► x p is an automorphism of F, The 
approach here is based on |21j . 

7.1 The automorphisms of the split octonion algebras 

Let C be a composition algebra over F. A map a : C — > C is a linear 
automorphism (resp. semilinear automorphism) of C if it is a bijective F- 
linear (resp. .F-semilinear) map preserving the multiplication, i.e., satisfying 
(uv)a = (ua)(va) for every u, v £ C. It is well known that the group of 
linear automorphisms of O(F) is isomorphic to the Chevalley group G^-F), 
cf. [11, Sec. 3], [22l Ch. 2]. The group of semilinear automorphisms of O(F) 
is therefore isomorphic to G2(F) x AutF. 

Since every linear automorphism of a composition algebra is an isometry 
[221 Sec. 1.7], it induces an automorphism on the loops M(F) and M*(F). 
The following result — that is interesting in its own right — shows that every 
element of O(F) is a sum of two elements of norm one. Consequently, 
AutO(F) < AutM*(F). 

Theorem 7.1 (Thm. 3.3 [29]). Let F be any field and O(F) the split octo- 
nion algebra over F. Then every element ofO(F) is a sum of two elements 
of norm one. 

Proof. As before, we identify O(F) with the Zorn vector matrix algebra 
over F, where the norm is given by the determinant. Let 



be an element of O(F). First assume that /5 / 0. Note that for every 
A G F there is 7 <E F 3 such that 7 • (3 = X. Pick 7 <E F 3 so that 7 ■ /3 = 
a + b — ab + a ■ (3. Then choose 5 € 7 -1 D a 1 - ^ 0. This choice guarantees 
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that (a - - 1) - (a - 7) • (f3 - S) = ab - a - b + 1 - a ■ j3 + 7 • f3 = 1. 
Thus 

/ a a\ / 1 t \ , / o-l at-j \ 
\P b J V 6 1 / V 6-1 J 

is the desired decomposition of x into a sum of two elements of norm 1. 

Note that the above procedure works for every a. 

Now assume that (3 = 0. If a ^ 0, we use a symmetrical argument as 

before to decompose x. It remains to discuss the case when a = j3 = 0. 

Then the equality 

( a \ / a (1,0,0) \ ( (-1,0,0) \ 

\o b j \ (-1,0,0) ; + v a.0,0) 6 ; 

does the job. □ 

An automorphism / € AutM*(F) will be called (semi)linear if it is 
induced by a (semi)linear automorphism of O(F). 

7.2 Geometric description of loop automorphisms 

By considering extensions of automorphisms of M*(F), it was proved in 
[29] that AutM*(2) is isomorphic to G2(2). The aim of this section is to 
generalize this result (although using different techniques) and prove that 
every automorphism of AutM*(F) is semilinear, provided F is perfect. We 
reach this aim by identifying AutM*(F) with a certain subgroup of the 
automorphism group of the group with triality associated with M*(F). 

To begin with, we recall the geometrical characterization of automor- 
phisms of a loop, as promised in Subsection 12.41 

Lemma 7.2 (Thm. 10.2 |3j). Let L be a loop and J\f its associated 3- 
net. Any direction preserving collineation which fixes the origin of N is 
of the form (x, y) 1— > (xa, ya) for some a £ AutL. Conversely, the map 
a : L — > L is an automorphism of L if and only if (x, y) 1— > (xa, ya) is a 
direction preserving collineation of N ' . 

We will denote the map (x, y) 1— » (xa, ya) by (p a . Before reading any 
further, recall Propositions 15.91 and 15.101 

Proposition 7.3. Let L be a Moufang loop andJ\f its associated 3-net. Let 
M be the group of collineations generated by the Bol reflections of N , Mq the 
direction preserving part of M, and S = S3 the group generated by the Bol 
reflections whose axis contains the origin of N '. Then AutL = C Aut M (S) . 
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Proof. As the set of Bol reflections of N is invariant under conjugations 
by collineations, every element (p G Coll M normalizes the group Mq and 
induces an automorphism (p of M . It is not difficult to see that (f fixes 
the three lines through the origin of M if and only if (p centralizes (the 
involutions of) S. 

Pick a G AutL, and let ^ be the automorphism of Mq induced by the 
collineation (f a . As p> a fixes the three lines through the origin, tp^ belongs 
to C\ u t m (S), by the first paragraph. 

Conversely, an element ip G CAutMo('S') normalizes the conjugacy class 
of o" in MqS and preserves the incidence structure defined by the embedding 
of AT. This means that ip = <p for some collineation <p G Coll Af. Now, ip 
centralizes S, therefore <p fixes the three lines through the origin. Thus (p 
must be direction preserving, and there is a G AutL such that ip = ip a , by 
Lemma [7.21 □ 



7.3 The automorphisms of Paige loops 

Theorem 7.4. Let F be a perfect field. Then the automorphism group 
of the nonassociative simple Moufang loop M*{F) constructed over F is 
isomorphic to the semidirect product G 2 (F) x AutF. Every automorphism 
of M*(F) is induced by a semilinear automorphism of the split octonion 
algebra Q(F). 

Proof. We fix a perfect field F, and assume that all simple Moufang loops 
and Lie groups mentioned below are constructed over F. 

The group with triality associated with M* is the multiplicative group 
MltM* = D4, and the graph automorphisms of D4 are exactly the triality 
automorphisms of M* (cf. [TT], [ID])- To be more precise, Preudenthal 
proved this for the reals and Doro for finite fields, however they based their 
arguments only on the root system and parabolic subgroups, and that is 
why their result is valid over any field. 

By [EE], C Dt (a) = B 3 , and by [T71 Lemmas 4.9, 4.10 and 4.3]. C Di (p) = 
G 2 . As G 2 <B 3 , by |14, p. 28], we have C D4 (S 3 ) = G 2 . 

Since F is perfect, Aut D4 is isomorphic to A x (Aut F x S3), by a result 
of Steinberg (cf. [7J, Chapter 12]). Here, A is the group of the inner and 
diagonal automorphisms of D4, and S3 is the group of graph automorphisms 
of D4. When charF = 2 then no diagonal automorphisms exist, and A = 
InnL> 4 . When charF / 2 then S3 acts faithfully on A/InnL> 4 S C 2 x C 2 . 
Hence, in any case, C&(S 3 ) = Cd a {S 3 ). Moreover, for the field and graph 
automorphisms commute, we have CAut D 4 (S 3 ) = Cd 4 (S 3 ) x Auti 7 . 
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We have proved AutM* = G 2 XI AutF. The last statement follows 
from the fact that the group of linear automorphisms of the split octonion 
algebra is isomorphic to G 2 . □ 



8 Related results, prospects and open problems 

We conclude with a few results and open problems concerning simple Mo- 
ufang loops. 



8.1 Generators for finite Paige loops 

It is well known that every finite simple group is generated by at most 2 
elements. This result requires the classification of finite simple groups, and 
was finalized in [2]. Since any two elements of a Moufang loop generate 
a subgroup, no nonassociative Moufang loop can be 2-generated. The fol- 
lowing theorem can be proved using some classical results on generators of 
groups SL(2,q), cf. [31]: 

Theorem 8.1. Every Paige loop M*{q) is 3-generated. When q > 2, the 
generators can be chosen as 

Oei\ / e 2 \ /AO 
-e x A ) ' V -e 2 A J ' V A" 1 

where X is a primitive element of GF(q), and ei is the 3-vector whose only 
nonzero coordinate is in position i and is equal to 1. When q = 2, the 
generators can be chosen as 



1 




1 


e 2 \ 


P 


e3 \ 


ei 




V e 2 


o h 


V e 3 


1 J 



8.2 Generators for integral Cayley numbers of norm one 

Let C = (C, N) be a real composition algebra. The set of integral elements 
of C is the maximal subset of C containing 1, closed under multiplication 
and subtraction, and such that both aN and a + a are integers for each a 
in the set. 

Let K, C, H, O be the classical real composition algebras, i.e., those 
obtained from K by the Cayley-Dickson process with parameter A = — 1. 
The real octonions O are often called Cayley numbers. For C € {M, C, H}, 
there is a unique set of integral elements of C. (For instance, when C = C 



28 



G. P. Nagy and P. Vojtechovsky 



this set is known as the Gaussian integers.) When C = O, there are seven 
such sets, all isomorphic, as Coxeter showed in [9]. 

We use the notation of [9] here. Let J be one of the sets of integral 
elements in O, and let J' = {x G J\ xN = 1}. Then \J'\ = 240, and 
J'/{1, —1} is isomorphic to M*(2). (This may seem strange, however, 
M*(2) is a subloop of any M*(q), too.) Hence, by TheoremEU J' /{I, -1} 
must be 3-generated. Let i, j, k be the usual units in H, and let e be 
the unit that is added to EI when constructing O. Following Dickson and 
Coxeter, let h = (i + j + k + e)/2. Then one can show that i, j and /i 
generate J' /{l, —1} (multiplicatively) . Since i 2 = —1, it follows that every 
set of integral elements of unit norm in O is 3-generated, too. See [30] for 
details. 

8.3 Problems and Conjectures 

Problem 8.2. Find a presentation for M*(q) in the variety of Moufang 
loops, possibly based on the generators of Theorem ] 8. 1{ 

Problem 8.3. Find {necessarily infinite) nonassociative simple Moufang 
loops that are not Paige loops. 

Conjecture 8.4. Let L be a nonassociative simple Moufang loop and let 
H = Mlt(L) e be the stabilizer of the neutral element in the multiplication 
group of L. Then H is simple. 

Problem 8.5. Find a function f : N — > N such that the order of the 
multiplication group of a Moufang loop of order n is less that f(n). 

For the finite Paige loop M*{q), we have 



where d = (2,q- 1). Hence |Mlt(M*(g))| < A\M*(q)\ 4 holds. This moti- 
vated us to state: 

Conjecture 8.6. The function f(n) = 4n 4 solves Problem \8.5[ 
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